A University Exercise in Application Data Mapping For Data Owners

The talk will highlight an exercise undertaken by the university to assist data owners in identifying and classifying computerized information assets. The speaker will present a workbook tool developed to assist data owners with the process. The speaker will show how the approach heightened security awareness on the part of data owners, helped clarify the movement of university data, better positioned IT to map information types to security controls and impact levels, and established a baseline for continuous review. The talk will provide real-world context on the overall approach and its results.